https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:11:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-14937 bdu:2026-14937 https://cve.radiocsirt.org/vuln/bdu:2026-14937 https://cve.radiocsirt.org/vuln/euvd-2026-371543 EUVD-2026-371543 https://cve.radiocsirt.org/vuln/euvd-2026-371543 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92946 <p>vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can require vm2&#39;s own package, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands via child_process.</p> <p>vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can require vm2&#39;s own package, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands via child_process.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-92946 https://cve.radiocsirt.org/vuln/ghsa-29x6-9qh5-83gg <p>vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can require vm2&#39;s own package, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands via child_process.</p> <p>vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can require vm2&#39;s own package, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands via child_process.</p> https://cve.radiocsirt.org/vuln/ghsa-29x6-9qh5-83gg https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2997 <p>Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2997